CVE-2018-0513 Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vector...
MediumCVSS 6.1
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mtssb.mt-systems simple booking | <= 1.2.1 | No fix listed |
| mtssb.mt-systems simple booking | <= 1.28.0 | No fix listed |
| MT Systems Co., Ltd. MTS Simple Booking C | = all versions | No fix listed |
| MT Systems Co., Ltd. MTS Simple Booking Business | = version 1.28.0 and earlier | No fix listed |
References
- mtssb.mt-systems.jp patch vendor-advisory
- JVN#99312352 third-party-advisory